]> git.ipfire.org Git - thirdparty/bind9.git/commit
2834. [bug] HMAC-SHA* keys that were longer than the algorithm
authorEvan Hunt <each@isc.org>
Thu, 7 Jan 2010 21:52:12 +0000 (21:52 +0000)
committerEvan Hunt <each@isc.org>
Thu, 7 Jan 2010 21:52:12 +0000 (21:52 +0000)
commit0f66aced2640d964aeb6db41210711ba0640d7f2
tree212e7c568379967312d8ad4e7275cd9eeecd7f19
parentda424755641cae385781f01c54333a7f2339f183
2834. [bug] HMAC-SHA* keys that were longer than the algorithm
digest length were used incorrectly, leading to
interoperability problems with other DNS
implementations.  This has been corrected.
(Note: If an oversize key is in use, and
compatibility is needed with an older release of
BIND, the new tool "isc-hmac-fixup" can convert
the key secret to a form that will work with all
versions.) [RT #20751]
19 files changed:
CHANGES
bin/tools/.cvsignore
bin/tools/Makefile.in
bin/tools/isc-hmac-fixup.8 [new file with mode: 0644]
bin/tools/isc-hmac-fixup.c [new file with mode: 0644]
bin/tools/isc-hmac-fixup.docbook [new file with mode: 0644]
bin/tools/isc-hmac-fixup.html [new file with mode: 0644]
bin/tools/win32/ischmacfix.dsp [new file with mode: 0644]
bin/tools/win32/ischmacfix.dsw [new file with mode: 0644]
bin/tools/win32/ischmacfix.mak [new file with mode: 0644]
bin/tools/win32/journalprint.mak
bin/win32/BINDInstall/BINDInstallDlg.cpp
doc/arm/Bv9ARM-book.xml
doc/arm/man.isc-hmac-fixup.html [new file with mode: 0644]
lib/dns/hmac_link.c
lib/isc/include/isc/md5.h
util/copyrights
win32utils/BINDBuild.dsw
win32utils/BuildAll.bat